Termshark: A Wireshark via Terminal
A command line user interface, inspired by Wireshark
Termshark is a command line user interface, inspired by Wireshark. Resources
- Read pcap files or analyze active interfaces (with appropriate permissions)
- Filter pcaps or live captures using Wireshark display filters
- Reassemble and inspect TCP and UDP streams
- View network conversations by protocol
- Copy package ranges to the terminal clipboard
- Written in Golang, it compiles into a single executable on each platform - downloads available for Linux, macOS, FreeBSD, Android (termux) and Windows.
Installation
First you need to install Go, for that use the package manager of your distribution, examples:
Also install the dependencies:
- tshark - command line network protocol analyzer, part of Wireshark
- tcell - a cell-based terminal management package, inspired by termbox
- gowid - composition terminal user interface widgets, inspired by urwid, built in tcell
After that just use the go
command to install:
And include the path in your $PATH
variable, example:
Example of use
Capture ping packets on the enp1s0 interface:
For more information, run the command:
And visit the official address of the project: https://github.com/gcla/termshark
Comments